$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft File: B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json) Hash identifier: lgeU/bwK2Kd98QMjGHZRR7/aAXLmJ2+K1RibfqUuuQk= Subject key identifier: E6:38:35:92:B5:86:75:ED:28:19:57:DA:D0:81:D6:95:25:4B:74:F9 Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B Certificate issuer: /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft Manifest number: 27 Signing time: Sat 09 Aug 2025 08:19:37 +0000 Manifest this update: Sat 09 Aug 2025 08:19:37 +0000 Manifest next update: Sat 16 Aug 2025 08:19:37 +0000 Files and hashes: 1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: CHPNL8Zo+1GnjmqH10vHb0GIvDuJX0fZK7anfwLN5Mo=) 2: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (hash: WQ8BuE65YXtQyTIurkyDNftfUcfnYZp85uvlHfPR7PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B Validity Not Before: Aug 9 08:19:37 2025 GMT Not After : Aug 16 08:19:37 2025 GMT Subject: CN=68970499-647a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f5:8f:b3:e0:57:a6:b1:83:2a:b5:1d:67:3d: 36:f1:ff:db:cb:94:a8:de:9f:99:25:5b:bc:0c:68: 1a:2e:14:3c:b5:20:c6:41:4d:27:3e:ca:de:cb:91: e2:5a:42:46:2a:ad:78:9f:d4:d4:0e:ad:7f:be:c3: ba:5c:40:89:2a:8c:a9:f8:93:16:ca:df:ff:66:63: 92:c3:dc:65:76:2c:1d:ae:e7:7d:cf:7d:7a:a2:bd: 7b:7f:42:d0:fc:35:47:8c:38:07:9d:4c:fa:36:53: 38:7a:f6:6a:ad:42:7c:50:f3:3b:4d:6c:21:4a:ad: 13:2e:d6:61:64:f7:ce:76:d2:d6:d0:45:de:f7:5c: 70:bc:e7:92:98:8b:f2:d6:20:43:a3:a5:ec:30:96: 2b:01:db:bf:7d:98:d1:8d:fe:86:35:50:61:4e:58: 13:ac:b3:d3:4a:bf:0c:fc:ba:45:f2:11:65:12:8a: 8b:21:59:3e:85:8b:7b:20:0b:9c:ec:1a:ff:1e:41: ff:eb:8d:fd:03:1c:e1:bc:d8:4d:bd:8c:67:36:e9: f2:56:aa:e6:7d:c1:1a:6e:79:23:e4:9a:82:bf:a0: 60:2d:cd:d5:e5:27:72:42:30:d2:5b:2b:a6:11:c5: f8:49:4e:5a:66:58:b7:65:6c:60:ff:6c:59:64:45: 09:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:38:35:92:B5:86:75:ED:28:19:57:DA:D0:81:D6:95:25:4B:74:F9 X509v3 Authority Key Identifier: keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:83:b9:46:4b:b8:35:90:78:2d:cd:35:77:e2:81:70:f7:e5: 5c:ad:98:15:26:f8:75:36:e0:cf:7e:c7:bb:d4:c4:d4:f1:94: ef:72:b1:53:8c:61:50:6b:2d:61:d1:b8:b2:a6:92:e8:bc:1f: b9:3b:44:de:eb:56:59:96:b6:6f:6d:bf:95:ec:40:3a:9c:dc: bf:e0:63:01:dd:71:ff:67:bd:9e:8b:f2:91:17:a1:7f:d8:6a: fe:c5:78:43:d0:f4:fb:f6:9f:76:7e:d0:31:25:a9:c3:96:4f: b1:c3:e2:49:36:b8:df:cb:b6:88:5b:00:ca:fa:ed:7a:a6:5a: f1:49:3a:6f:da:4c:1c:3e:c7:ab:cd:b7:c5:37:4a:c9:80:77: 71:dd:94:e3:85:b3:84:2e:a1:9d:79:90:74:57:20:53:fb:27: cb:31:02:27:49:cd:e0:3e:ab:1c:99:5d:90:72:6d:ac:e1:d6: 5f:d7:74:57:89:cc:6c:a4:7c:1b:14:c8:37:2a:b3:df:58:70: 5c:6f:96:0c:4a:c2:46:40:8c:91:8a:35:d8:be:51:43:63:12: e8:e7:f4:7a:6f:0f:5f:ce:46:15:97:0b:33:f8:4a:78:42:47: 05:a7:32:a7:e3:80:84:22:4b:7b:63:09:45:f0:e2:c3:bd:88: 55:47:17:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDMwOTExMC8GA1UEBRMoMDc3QkNENjYzQjBFNjNCREY1RTlCODA5QUY3MUFFRjFF NUFERjYzQjAeFw0yNTA4MDkwODE5MzdaFw0yNTA4MTYwODE5MzdaMBgxFjAUBgNV BAMTDTY4OTcwNDk5LTY0N2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk9Y+z4FemsYMqtR1nPTbx/9vLlKjen5klW7wMaBouFDy1IMZBTSc+yt7LkeJa QkYqrXif1NQOrX++w7pcQIkqjKn4kxbK3/9mY5LD3GV2LB2u533PfXqivXt/QtD8 NUeMOAedTPo2Uzh69mqtQnxQ8ztNbCFKrRMu1mFk98520tbQRd73XHC855KYi/LW IEOjpewwlisB2799mNGN/oY1UGFOWBOss9NKvwz8ukXyEWUSioshWT6Fi3sgC5zs Gv8eQf/rjf0DHOG82E29jGc26fJWquZ9wRpueSPkmoK/oGAtzdXlJ3JCMNJbK6YR xfhJTlpmWLdlbGD/bFlkRQnDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5jg1krWG de0oGVfa0IHWlSVLdPkwHwYDVR0jBBgwFoAUB3vNZjsOY7316bgJr3Gu8eWt9jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0MzA5L0Q0MUZBMzJDM0VF MzExRjBCOTM5ODQ0MkM0RjlBRTAyL0Izdk5aanNPWTczMTZiZ0pyM0d1OGVXdDlq cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQjN2Tlpqc09ZNzMxNmJnSnIzR3U4ZVd0OWpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 MzA5L0Q0MUZBMzJDM0VFMzExRjBCOTM5ODQ0MkM0RjlBRTAyL0Izdk5aanNPWTcz MTZiZ0pyM0d1OGVXdDlqcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKKDuUZLuDWQeC3NNXfigXD35VytmBUm+HU24M9+x7vUxNTxlO9ysVOM YVBrLWHRuLKmkui8H7k7RN7rVlmWtm9tv5XsQDqc3L/gYwHdcf9nvZ6L8pEXoX/Y av7FeEPQ9Pv2n3Z+0DElqcOWT7HD4kk2uN/LtohbAMr67XqmWvFJOm/aTBw+x6vN t8U3SsmAd3HdlOOFs4QuoZ15kHRXIFP7J8sxAidJzeA+qxyZXZBybazh1l/XdFeJ zGykfBsUyDcqs99YcFxvlgxKwkZAjJGKNdi+UUNjEujn9HpvD1/ORhWXCzP4SnhC RwWnMqfjgIQiS3tjCUXw4sO9iFVHF/M= -----END CERTIFICATE-----Generated at Sun Aug 10 16:12:00 2025 by rpki-client